CVE-2026-19803

The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to and including 2.13.2 . The root cause is located in the nbu_crop_image AJAX handler, where the Nbdesigner_IO::convert_url_to_path() function fails ...

EUVD-2026-118599

The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the nbucropimage AJAX handler accepting a user-supplied url parameter that NbdesignerIO::converturltopath...